• 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle

  • It’s very spring here in the south, so I’m outside tending to the yard-wide flower bed we set up last year. I’ve been battling the grass growing back in it for a while and almost gave up after the brutal summer last year killed off half of my plants. I found that using saved up cardboard and mulch keeps a lot of the grass at bay. So that’s been my project for a few weeks now, slowly filling the whole bed and revitalizing the whole thing.
    As a small reward for the progress I’ve made, I picked up a few perennials at the store the other day: salvia, lantana, and some consumables - dill, basil, and peppers. They look really nice in the parts of the bed I’ve already tended to :)







  • From an IT perspective with little context on this change other than what’s in the article, if there’s no way to import your own certs using an MDM, this change is terrible for businesses.

    You need custom certs for all kinds of things. A company’s test servers often don’t use public CA certs because it’s expensive (or the devs are too lazy to set up Let’s Encrypt). So you import a central private CA cert to IT-managed devices so browsers and endpoints don’t have a fit.

    For increased network security, private CAs are used for SSL decryption to determine what sites devices are going to and to check for malware embedded in pages. In order to conduct SSL decryption, you need your own private CA cert for decrypting and re-encrypting web content. While this is on the decline because of pinned certs being adopted by big websites, it’s still in use for any sites you can get away with. You basically kill any network-level security tools that are almost certainly enabled on the VPN/SASE used to access private test sites.